;; SPDX-FileCopyrightText: © 2025 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense

(block tuntap

  (filecon "/dev/net/tun" char nodedev_context)
  (filecon "/dev/tap([0-9]+)?" char nodedev_context)

  (blockinherit .nodedev.template)

  (call .rbacsep.exempt.obj.type (nodedev)))